In gnutls upstream we recently received a potential CVE: Double free during gnutls_pkcs7_verify. https://gitlab.com/gnutls/gnutls/-/issues/1383
Created gnutls tracking bugs for this issue: Affects: fedora-all [bug 2112295] Created mingw-gnutls tracking bugs for this issue: Affects: fedora-all [bug 2112294]
This issue was fixed upstream in version 3.7.3, see GNUTLS-SA-2022-07-07: https://gnutls.org/security-new.html#GNUTLS-SA-2022-07-07
This issue has been addressed in the following products: Red Hat Enterprise Linux 9 Via RHSA-2022:6854 https://access.redhat.com/errata/RHSA-2022:6854
This issue has been addressed in the following products: Red Hat Enterprise Linux 8 Via RHSA-2022:7105 https://access.redhat.com/errata/RHSA-2022:7105
This bug is now closed. Further updates for individual products will be reflected on the CVE page(s): https://access.redhat.com/security/cve/cve-2022-2509